NIST asking for agent security comments right as the agent stack is splitting into layers with completely different threat models.

A model layer vulnerability looks nothing like a tool-use layer vulnerability.. but most framework still treats "the AI system" as one blob. But probably nobody who owns the audit trail when an agent chain spans six vendors.

Wrote about this layering in an article last month: https://philippdubach.com/posts/dont-go-monolithic-the-agent...